This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[7.001] No Verify recipient anymore?

Hi,
does ASL 7 not contain the Verify recipient feature like
6.X?

cu SveN


This thread was automatically locked due to age.
Parents
  • I'm sure they took it out, because spammers found a way to use it to their advantage...  I've had to disable it on most of my V6 installations.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • Bruce, you must be confusing the "Verify Recipient" feature with the "Verify Sender" feature as the "Verify Recipient" feature is VERY useful as it prevents backscatter and prevents illegitimate email from being received in the first place.

    I'm going to have to test this, as if the SMTP proxy doesn't validate the recipient and instead generates bounces for invalid recipients, that makes you very likely to appear on various RBL blacklists for having a misconfigured mail server.
  • Hi drees,
    I agree with you...
  • I just tested it, looks like it verifies the recipient by default which is good. [:)]

    Although, before I entered a valid gateway on the system it didn't verify the recipient which had me confused for a while.
  • No, I'm not confused, it was the Verify RCPT option that I am thinking about.  All I know is Astaro Support told me it was a bad idea to have it on.. after they explained why, it made perfect sense.  Mail servers sometimes send NDRs when the Verify RCPT is run; a spammer could randomly generate email addresses, and when they didn't get an NDR back, they would know they had a valid address... automate that, and suddenly your Astaro is flooded with requests.. I had this happen to a customer with a 220, and it brought it to it's knees.

    ---hmmm just read what drees just posted.. interesting... Astaro Support must've been wrong, or is not heeding their own advice to me.  All I know is that once that was turned off, the traffic gradually went down.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • Hi BrucekConvergent,
    I agree with you too :-)
    Maybe Astaro should say what they have done in V7
    and if it is configurable or not...
Reply Children
No Data